(This is our CINS Army Brief for September 2020. Learn more and subscribe here.)

And the “CINSY” for Baddest Actor in Cybersecurity for 2020 goes to . . . Novel Coronavirus-2019. Covid-19 has changed how we work, live and learn, and has had a profound impact on Cybersecurity. The pandemic has opened a “back door” to elite hackers who target the vulnerable. Hacking, phishing, and ransomware have flourished during the pandemic. Read on for Covid-related news and more scams to be aware of this season.

• COVID cybercrime: 10 disturbing statistics to keep you awake tonight
  https://www.zdnet.com/article/ten-disturbing-coronavirus-related-cybercrime-statistics-to-keep-you-awake-tonight/
• VPNs: The Cyber Elephant in the Room
  https://www.darkreading.com/vulnerabilities—threats/vpns-the-cyber-elephant-in-the-room/a/d-id/1338810
• UHS hospitals hit by reported country-wide Ryuk ransomware attack
  https://www.bleepingcomputer.com/news/security/uhs-hospitals-hit-by-reported-country-wide-ryuk-ransomware-attack/
• CISA says a hacker breached a federal agency
  https://www.zdnet.com/article/cisa-says-a-hacker-breached-a-federal-agency/
• Payment Card Skimming Hits 2,000 E-Commerce Sites
  https://www.bankinfosecurity.com/payment-card-skimming-hits-2000-e-commerce-sites-a-15000
• Cybersecurity Conundrum: Who’s Responsible for Securing IoT Networks?
  https://www.technewsworld.com/story/86857.html
• The Cybersecurity Threat No One Talks About Is A Simple Code
  https://www.forbes.com/sites/louiscolumbus/2020/09/20/the-cybersecurity-threat-no-one-talks-about-is-a-simple-code/#4a1872667e2a
• FBI says credential stuffing attacks are behind some recent bank hacks
  https://www.zdnet.com/article/fbi-says-credential-stuffing-attacks-are-behind-some-recent-bank-hacks/
• “LokiBot,” the malware that steals your most sensitive data, is on the rise
  https://arstechnica.com/information-technology/2020/09/lokibot-the-malware-that-steals-your-most-sensitive-data-is-on-the-rise/
• CISOs are struggling to prepare for security compliance audits
  https://www.techrepublic.com/article/cisos-are-struggling-to-prepare-for-security-compliance-audits/
• Can local governments’ cyber flaws be fixed?
  https://gcn.com/articles/2020/09/14/local-gov-cybersecurity.aspx
• Third-party security risk is substantial – and many providers’ readiness is substandard
  https://www.healthcareitnews.com/news/third-party-security-risk-substantial-and-many-providers-readiness-substandard
• Cybersecurity: Your supply chain is now your weakest link
  https://www.zdnet.com/article/cybersecurity-your-supply-chain-is-now-your-weakest-link/
• 5 simple steps to bring cyber threat intelligence sharing to your organization
  https://www.helpnetsecurity.com/2020/09/21/5-simple-steps-to-bring-cyber-threat-intelligence-sharing-to-your-organization/
• Justifying your 2021 cybersecurity budget
  https://www.helpnetsecurity.com/2020/09/18/justifying-your-2021-cybersecurity-budget/
• What are the most vulnerable departments and sectors to phishing attacks?
  https://www.helpnetsecurity.com/2020/09/16/vulnerable-departments-sectors-phishing-attacks/